During an assessment, a penetration tester runs the following command: setspn.exe -Q / Which of the following attacks is the penetration tester preparing for?

The correct answer is C. Kerberoasting. Kerberoasting is an attack that involves requesting service tickets for service accounts from a Kerberos service, extracting the service tickets, and attempting to crack them offline to retrieve the plaintext passwords.

Submitted by femi9· Mar 6, 2026Attacks and Exploits

Question

During an assessment, a penetration tester runs the following command:

setspn.exe -Q / Which of the following attacks is the penetration tester preparing for?

Options

ALDAP injection
BPass-the-hash
CKerberoasting
DDictionary

How the community answered

(21 responses)

A
5% (1)
B
5% (1)
C
76% (16)
D
14% (3)

Explanation

Kerberoasting is an attack that involves requesting service tickets for service accounts from a Kerberos service, extracting the service tickets, and attempting to crack them offline to retrieve the plaintext passwords.

Topics

#Kerberoasting#Service Principal Names#Active Directory attacks#Windows commands

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice